Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/LCmUSxGkDZXiVrezaIIRTTcbpeo.roa
File: LCmUSxGkDZXiVrezaIIRTTcbpeo.roa (raw, json)
Hash identifier: +w30s5+8L0D87cHc7HJwQrTbxGhC4/HXq9M4/QZew70=
Subject key identifier: 2C:29:94:4B:11:A4:0D:95:E2:56:B7:B3:68:82:11:4D:37:1B:A5:EA
Certificate issuer: /CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
Certificate serial: 019089E22989320387F9E26983A7E1B93253
Authority key identifier: B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/LCmUSxGkDZXiVrezaIIRTTcbpeo.roa
Signing time: Sat 06 Jul 2024 21:10:18 +0000
ROA not before: Sat 06 Jul 2024 21:10:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214587
IP address blocks: 2a13:7fc0:1010::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 06 Jul 2024 21:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:89:e2:29:89:32:03:87:f9:e2:69:83:a7:e1:b9:32:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
Validity
Not Before: Jul 6 21:10:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c29944b11a40d95e256b7b36882114d371ba5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8b:e1:b1:2d:32:b7:a1:9d:5e:a4:39:6d:05:
76:5b:eb:84:88:54:ee:04:cf:d2:1d:5e:6b:7e:77:
c7:bc:bd:c5:ea:cb:39:26:37:84:67:b4:83:d4:fd:
d5:63:3c:89:db:64:92:ce:33:a8:14:37:92:4c:69:
5b:e0:77:3d:3f:6a:4d:eb:1e:91:12:c3:10:78:ac:
57:f3:93:7b:92:9c:62:93:45:e2:4f:53:1a:23:47:
fa:9d:02:4b:f3:5b:57:af:eb:29:53:2e:27:23:ec:
62:46:0c:58:00:22:92:64:43:dd:97:1e:c0:1a:31:
56:8e:73:68:07:dc:86:7c:82:e3:c4:79:38:a0:71:
c0:e2:85:f2:83:17:ac:46:8c:47:69:9f:3a:1e:a2:
9d:9a:f7:18:b9:56:1d:7a:76:e1:a3:63:0d:2d:3b:
30:fa:ef:9b:c6:cf:19:98:40:f0:e1:45:4a:a5:d2:
d8:9a:b7:f6:ab:93:a5:ba:43:ed:ac:91:73:c7:8c:
6d:22:c1:2f:ff:9b:4a:a7:71:96:96:9d:90:61:c7:
04:59:e9:85:51:39:b2:e4:5e:47:b6:24:16:6e:cd:
c2:90:6d:88:d8:ce:6a:0d:2a:a8:15:3e:d4:a3:c8:
f7:1a:05:f8:f4:36:58:4a:bd:c8:13:62:67:e0:50:
47:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:29:94:4B:11:A4:0D:95:E2:56:B7:B3:68:82:11:4D:37:1B:A5:EA
X509v3 Authority Key Identifier:
keyid:B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/LCmUSxGkDZXiVrezaIIRTTcbpeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7fc0:1010::/48
Signature Algorithm: sha256WithRSAEncryption
b2:5c:d4:66:a6:e9:51:d8:1e:80:51:ff:f7:a8:4b:f3:06:df:
40:78:80:d8:24:ca:22:48:59:db:64:54:89:e0:7a:58:59:5a:
1c:55:d5:51:1a:d7:b4:4f:76:be:cb:43:6a:28:9c:49:f1:a6:
70:3c:ff:eb:d0:a0:f7:6c:4e:9b:54:7a:65:70:35:db:3d:21:
b1:dc:bd:5d:af:9b:ae:a0:94:ae:ad:48:70:fb:00:d1:52:fc:
92:a7:35:e0:76:29:8e:9a:95:bb:7c:5c:22:d2:95:43:24:f4:
d2:6d:86:fc:a8:73:d9:57:51:2d:45:56:55:57:ad:0b:7a:7d:
59:3b:0b:de:3b:51:4d:e2:b3:f5:42:69:22:2e:ac:a4:24:4f:
fc:96:f1:c0:20:cb:4c:71:ba:9e:1c:ec:0b:b5:52:76:1f:5c:
47:9a:5e:23:f2:40:6f:17:ff:22:ff:4d:ae:ab:e4:0e:f7:43:
6b:5f:3d:d9:74:1d:8b:3c:25:31:04:c9:4b:6d:a9:d4:bc:e0:
7a:33:18:1b:5f:a2:e2:4d:ff:bf:95:95:6a:69:8b:c9:75:cf:
3a:b3:cf:b3:6b:ba:02:ae:a5:59:a0:42:20:1c:f4:f6:c5:5f:
cc:dd:6c:12:1a:ef:e0:a1:5c:6e:ab:e1:20:dd:57:9c:ec:1c:
33:72:de:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:26 2025 by rpki-client